Re: [dmarc-ietf] Doing a tree walk rather than PSL lookup

[Doug Foster <[e-mail]>]

Better a correct answer slowly than an incorrect answer quickly.

 

For the existing PSL, it is not just the accuracy of the document itself, but also the accuracy of the parsing process.   Is there a well-trusted parser floating around?

 

DF

 

From: dmarc [mailto:[e-mail]] On Behalf Of Dave Crocker
Sent: Tuesday, November 24, 2020 1:19 PM
To: [e-mail]
Subject: Re: [dmarc-ietf] Doing a tree walk rather than PSL lookup

 

On 11/24/2020 9:21 AM, John Levine wrote:

With the tree walk, I was thinking that if the tree walk finds a _dmarc record, that acts
as the organizational domain, so finance.acme.example can only allow alignment with itself
or its descendants.
 
This is different from the way that OD works now, but the questions are is it worse, and what
will break if we do it.

 

Let's consider some attributes, starting with a trivial initial set...

 

Accuracy:       How accurate is the data that gets retrieved?

Reliability:    How likely is it that a query will complete successfully?

Latency:        How long does it take for a query to complete?

Vulnerability:  How easily/likely is it that the service can be compromised?

Scaling:        How well does it operate, at Internet scale?

 

                   PSL                      Tree-Walk

Accuracy:          Known problematic        100%

Reliability:       High                     Mixed

Latency:           None                     Potentially high

Vulnerability:     Generally none           DOS

Scaling:           Poor admin, good ops     Good admin, potentially poor ops

 

d/

-- 
Dave Crocker
[e-mail]
408.329.0791
 
Volunteer, Silicon Valley Chapter
American Red Cross
[e-mail]